Lucene search

K
osvGoogleOSV:GHSA-8RCQ-P4GH-VMJ8
HistoryMay 14, 2022 - 1:14 a.m.

Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

2022-05-1401:14:51
Google
osv.dev
10
apache activemq
administration web console
cross-site scripting
java memory dump
queue creation

EPSS

0.001

Percentile

37.6%

The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.2 allows remote authenticated users to conduct cross-site scripting (XSS) attacks and consequently obtain sensitive information from a Java memory dump via vectors related to creating a queue.

EPSS

0.001

Percentile

37.6%